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The paper discusses the role of interpretations, understood as multifunctions that preserve and reflect 
logical consequence, as refinement witnesses in the general setting of ^-institutions. This leads to 
a smooth generalization of the "refinement by interpretation" approach, recently introduced by the 
authors in more specific contexts. As a second, yet related contribution a basis is provided to build 
up a refinement calculus of structured specifications in and across arbitrary ^-institutions. 



1 Introduction 

The expression refinement by interpretation was coined in [MMB09b] to refer to an alternative approach 
to refinement of equational specifications in which signature morphisms are replaced by logical inter- 
pretations as refinement witnesses. 

Intuitively, an interpretation is a logic translation which preserves and reflects meaning. Actually, it 



is a central tool in the study of equivalent algebraic semantics (see, e.g., [W6j88 BP89, BPOL BR03, 
CzeOl ]), a paradigmatic example being the interpretation of the classical propositioned calculus into the 
equational theory of boolean algebras (cf. BBPOll Example 4.1.2]). Interestingly enough, and in the 
more operational setting of formal software development, the notion of interpretation proved effective 
to capture a number of transformations difficult to deal with in classical terms. Examples include data 
encapsulation and the decomposition of operations into atomic transactions [MMB09b |. 

A typical refinement pattern that is not easily captured by the classical approach concerns refinement 
of a subset of operations into operations defined over more specialized sorts. This kind of transformation 
induces the loss of the functional property on the operations' component of signature morphisms. For 
example, there is not a signature morphism a to guide a refinement where a specification with operations 
g : s' — > s and / : s' — > s is transformed into one with operations g : s' —> s new and / : s' — >■ s, since 
this translation naturally induces a map G sort (s) = {s,s new } which violates the definition of signature 
morphism. 

The approach seems also promising in the context of new, emerging computing paradigms which 
entail the need for more flexible approaches to what is taken as a valid transformation of specifications, 
as in, for example, [BSR04]. Later, in [MMB09a], the whole framework was generalized from the 
original equational setting to address deductive systems of arbitrary dimension. This made possible, for 
example, to refine sentential into equational specifications and the latter into modal ones. Moreover, the 
restriction to logics with finite consequence relations was dropped which resulted in increased flexibility 
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along the software development process. The interested reader is referred to both papers for a number of 
illustrative examples. 

On the other hand, the notion of an institution [GB92], proposed by J. Goguen and R. Burstall in the 
late 1970s, has proven very successful in formalizing logical systems and their interrelations. 

This paper aims at lifting the use of logic interpretations to witness refinement of specifications at 
an institutional level. This is made in the context of ^-institutions [FS88] which deal directly with 
syntactic consequence relations rather than with semantical satisfaction, as in the original definition of an 
institution [GB92]. ^-institutions are particularly useful in formalizing deductive systems with varying 
signatures, which are only indirectly handled by the methods of abstract algebraic logic, as in MBP011 on 
which our first generalization [MMB09a] is based. In general, ^-institutions provide a more operational 
framework with no loss of expressiveness as any classical institution can be suitably translated. 

Refinement by interpretation is proposed here at two different levels: a macro level relating different 
^-institutions, and the micro level of specifications inside a particular, although arbitrary, ^-institution. 
The former discusses what is an interpretation of institutions and provides the envisaged generalization of 
this approach to refinement of arbitrary deductive systems. The latter, on the other hand, corresponds to a 
sort of local refinement witnessed by interpretations thought simply as multifunctions relating sentences 
generated by different signatures within the same institution. 

As a second, although related, contribution, the paper lays the basis for a refinement-by-interpretation 
calculus of structured specifications in an arbitrary (and across) Ti-institution(s). That both levels can be 
addressed and related to each other comes to no surprise: a main outcome of institution theory is precisely 
to provide what [AN94] describes as effective mechanisms to manipulate theories in an analogous way 
as our deductive calculi manipulate formulas. 

The remainder of this paper is organized as follows. ^-institutions and a notion of interpretation 
between them are reviewed in section [2 Then, section [3] characterizes refinement by interpretation in 
this context, whereas the local view is discussed in section [4] The structure of a refinement calculus is 
discussed in section[5] Section[6]concludes and highlights some pointers to related work. 

2 ^-institutions and interpretations 

In broad terms, an institution consists of an arbitrary category Sign of signatures together with two 
functors SEN and MOD that give, respectively, for each signature, a set of sentences and a category 
of models. For each signature, sentences and models are related via a satisfaction relation whose main 
axiom formalizes the popular aphorism truth is invariant under change of notation [Dia08 ]. Such a very 
generic way to capture a logical system was originally motivated by quite pragmatic concerns: to provide 
an abstract, language-independent framework for specificifying and reasoning about software systems, 
in response to the explosion of specification logics. Several current specification formalisms, notably, 
CafeOBJ HDF02L Casl HMHST03I and Hets MMML07M were designed to take advantage of such a 
general framework. 

^-institutions, proposed by J. Fiadeiro and A. Sernadas in [FS88], fulfill a similar role, replacing 
semantical satisfaction by a syntactic consequence relation a la Tarski. Therefore, a 7T-institution intro- 
duces, for each signature, a closure operator on the set of its sentences capturing logical consequence. As 
remarked by G. Voutsadakis in IIVou031 % -institutions may he viewed as the natural generalization of the 
notion of a deductive system on which a categorical theory of algebraizability, generalizing the theory 
of [BP01 / may he based. In the sequel we review the basic definition and adopt Voutsadakis's notion of 
interpretation to define refinement by interpretation in such a general setting. 



C.J. Rodrigues, M.A. Martins, A. Madeira & L.S. Barbosa 



55 



Definition 1 A n-institution I is a tuple (Sign, SEN, (C-£.)ze\Sign\) where 

• Sign is a category of signatures and signature morphisms; 

• SEN : Sign — > Set is a functor from the category of signatures to the category of small sets giving, 
for each £ E the set SEN(£) ofL-sentences and mapping each f : £1 — > £2 to a substitution 
SEN(/) :SEN(L 1 )^SEN(E 2 ); 

• for each £ E \Sign\, Cz '■ =^(SEN(£)) — > ^3 2 '(SEN(r)) is a mapping, called Z-closure, such that, 
for all A , B C S E N (£) and £1 , £ 2 £ Sz'gn; 

(a) A C C E (A) 

(b) Cz(Cz(A))=Cz{A) 

(c) C E (A) CC z {B)forACB 

(d) SEN(/)(C El (A))CC E2 (SEN(/)(A)) 

Note that the £-closure operator of a 71 -institution is not required to be finitary. 

Definition 2 A n-institution I' = (Sign' , SEN', (C^Egi^/i) is a sub-7T -institution of I = (Sign, SEN, 
{Cz)xe\Sign\) if Sign' is a sub-category of Sign and, for each £ £ \Sign'\, SEN'(£) C SEN(£) and the 
^.-closure is the restriction ofCz- 

Roughly speaking, the notion of logical interpretation underlying [MMB09a] is that of [BP89]]: a 
multifunction (i.e., a set-valued function) relating formulas which preserves and reflects logical conse- 
quence. Note that the expressive flexibility of interpretations comes precisely from their definition as 
multifunctions. A corresponding definition, to be used in the sequel, was proposed, in the context of 
^-institutions, in IIVou031 : 

Definition 3 Given two n-institutions I = (Sign, SEN , (Cz)ze\Sign\) an d I' = (Sign' , SEN' , (Cz)E e \ Sign i\), 
a translation (F, a) : I — >l' consists of a functor F : Sign — > Sign' together with a natural transformation 
a:SEN^^SEN'F. 

A translation (F, a) :I — >•/' is a semi-interpretation if, for all £ E |5ign|, <J>U {0} C SEN(£), 

0eC z (<I>) a E ((j>)CC' m (a^)) (1) 

It is an interpretation if, 

^Cj;(<D) o a z ((j>) cc^ (E) (a E (3>)) (2) 

Finally, we say that a translation (F,ot) interprets a % -institution I, if there is a 71 -institution 7° = 
(Sign , SEN , (C^)ze\sign°\) f or which (F,a) is an interpretation. 

Note that a translation depends only on the categories of signatures and the sentence functors in- 
volved, but not on the family of closure operators. A translation is a self-translation if F is the identity 
functor Id. On the other hand, it is said to be afunctional translation if, for every £ E | Sign \ , <j) E S EN (£), 
= 1- Additionally, it is an identity translation, if for every £ £ \Sign\, £ SEN(£), 



Ofc(0) = W 



(3) 
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3 Refining ^-institutions by interpretation 

In software development the process of stepwise refinement [ST88b] encompasses a chain of successive 
transformations of a specification 

■So ~» Si ~> S2 ~* ■ ■ ■ ~* 5 n _i ~> 5 n 

through which a complex design is produced by incrementally adding details and reducing under-spe- 
cification. This is done step-by-step until the class of models becomes restricted to such an extent that 
a program can be easily manufactured. The discussion on what counts for a valid refinement step, 
represented by Sj ~> Ss, is precisely the starting point of this line of research. 

The minimal requirement to be placed on a refinement relation, besides being a pre-order to allow 
stepwise construction, is preservation of logical consequence. In the framework of ^-institutions this 
corresponds to the following definition: 

Definition 4 (Syntactic refinement) Letl= (Sign, SEN , (Cz)ze\sign\) and I' = (Sign' , SEN' , (C'^z^sign'i) 
be two Tt-institutions. I' is a syntactic refinement of I if Sign is a sub-category of Sign' and, for each 
L G \Sign\, SEN(I) C SEN'(I) andC z (<I>) C C£(«J>) for <J> C SEN'(I). 

Clearly, a ^-institution is a syntactic refinement of any of its 71-sub-institutions. Refinement by interpre- 
tation, on the other hand, goes a step further: 

Definition 5 (Refinement by interpretation) Consider two Tt-institutions I = (Sign, SEN, (Cz)ze\sign\) 

and t = (Sign' , SEN', (C^)ze\sign'\) and let (F, a) : / — > V be a translation. V is a refinement by inter- 
pretation of I via (F, a), written as I ~^m a \ I', if 

• there is a % -institution 1° = (Sign' , SEN', (C^zeSign 1 ) that interprets I under translation (F, a); 

• for all I G \Sign\, C SEN (I), 

0GC E (O) => a^)cc^(a,($)) 

Clearly, a syntactic refinement is a refinement by interpretation for a self, identity, functional inter- 
pretation, with F = Id. The following Lemma establishes an useful characterization of refinement via 
interpretation: 

Lemma 1 Let! = (Sign, SEN, (Cz)ze\Sign\) and I' = (Sign' , SEN', (Cz)ze\Sign'\) b e two %-institutions and 
(F, a) : / — > I' a translation. Then, I^^,a) I' iff' I s a syntactic refinement of some interpretation of I 
through (F, a). 

Proof. Suppose /' is a syntactic refinement of an arbitrary interpretation 1° of / along (F, a). Clearly the 
first condition in the definition of refinement by interpretation is met. For the second, let £ G Sign and 
<J>U {(j)} C SEN(L). Assume G C E (4>). Then 

a E (4>)cC° (E) (a E (<I>)) 
because (F, a) is an interpretation. On the other hand, /' being a syntactic refinement of 1°, 

C° m (azm^C' m (azm 

Thus, ^)CC; (s) (a E ($)). 

□ 

Definition [5] subsumes the corresponding notion introduced in [MMB09a] for ^-dimensional deduc- 
tive systems, because every ^-dimensional deductive system h over a countable set of variables 
V, gives rise to a specific 7i-institution leg = (Sign <g, Sen iC ^)z^\Sign x ^ ■< built in MVou021 as follows: 
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(i) Sign % is the one-object category with object V. The identity moronism is the inclusion iy : V — > 

Fmjfi(V), where Fmy(V) denotes the set of formulas constructed by recursion using variables 
in V and connectives in if in the usual way. Composition g ■ f is defined by g ■ f = g*f, where 
g* : Fmy(V) — > Fm^(y) denotes the substitution uniquely extending g to Fm^?(V). 

(ii) SEN # : Signy Set maps V to Fm k ^(V) and / : V -> V to Fmy(V) (f*) k : Fm% (V) -> Fm%(V). 

It is easy to see that SEN^ is indeed a functor. 

(iii) Finally, Cy is the standard closure operator Cy : ^(Fmy(y)) — > ^(Fmy(y)) associated with 

(if, h ^}, i.e., C v (4») = {0 6 Fm^(V) : h.y- 0} for all C Fm^(V). 

Example 1 77ze 7t -institution of modal logic S5 G forms a (syntactic) refinement of the one for classical 
propositional calculus (CPC). Actually, consider the modal signature £={— »,A,V,-i,T,_L, □}. Modal 
logic K is defined as an extension of CPC by adding the axiom □(/?— >q) —>•(□/?— > Oq) and the inference 
rule Logic S5 G , on the other hand, enriches the signature of K with the symbol O, and K itself with 
the axioms Up — > p, □/?—>■□□/? and <>p —> OOp, cf. [BP01]. Hence, since the signature of both 
systems contains the signature of CPC and their presentations extend that of CPC with extra axioms 
and inference rules, we have CPC ~> K and CPC ~> S5 G (actually, CPC ~>- S5 G ). Hence, through 
these refinements, one may capture more complex, modally expressed requirements introduced along the 
refinement process. 

Given an interpretation x : Fmy(V) — > £P(Fmjfi(V')) between two deductive systems (if,K^) 
and (if' ,Ksf'}> let us define (F t ,t) as the translation between TT-institutions leg and I<gi, where F T is a 
functor between single object categories, mapping, at the object level, V to V'. As expected, 

Lemma 2 An l-deductive system (if' , h <gi) is an interpretation of a k-deductive system (if, h <£ } through 
an interpretation X, iff (F T ,x) interprets the K-institution l<g inly. 

Proof. Assume (if, h_2>) (respectively, (if',K^/)) are defined over a countable set of variables V (re- 
spectively, V'). Being an interpretation between deductive systems, X is a multifunction X : Fm y(V) — > 
^(fmy-(V')) such that, foraliru{0} CFmy(V), 

Th^0 ^ T(r)h^T^) (4) 
According to the construction of Iy, detailed above, this is equivalent to 

0GCy(r) o t(^)CC v /(t(T)) (5) 

□ 

Hence, it is immediate to check that 

Corollary 1 An l-deductive system (if', h j^'} ?J a refinement of a k-deductive system (if, h _jf) through 
an interpretation x, iff the %-institution ly is a refinement ofly through (F r ,x). 

As a final remark, note that, in a very precise sense, Definition [5] also covers the case of classical 
institutions. Actually, a ^-institution corresponding to a classical one can always be defined: for each 
signature £ and set of formulas *P, take Ce(*P) as the set of sentences satisfied in all models validating 
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4 The local view 

Having discussed refinement by interpretation of 7t -institutions, we address now the same sort of refine- 
ment applied to specifications inside an arbitrary % -institution. Such is the local view. Given an arbitrary 
^-institution / = (Sign, SEN, (Cz)Y.e\Sign\) ■> a basic, or flat specification is defined as 

SP = (£,<&> 

where £ £ \Sign\ and <1> C SEN(E). Its meaning is the closure of <!>, i.e., Ce(<I>). D. Sannella and A. 
Tarlecki in [ST88a] define specification over an arbitrary institution along similar lines, but taking, as 
semantic domain, classes of models instead of logical consequence relations. 

As expected, any morphism a : E — > E' in Sign entails a notion of local refinement ~» ff in / given 

by 

<£,<£> ^ a <£',<&') if ct(4>) C Ce{&) (6) 

For a an inclusion, this may be regarded as a form of syntactic refinement. 

Specifications may also be connected by interpretations which, again, correspond to multifunctions 
preserving and reflecting consequence. Formally, 

Definition 6 Let (£, <J>) and (if, <£>') be two specifications over a K-institution I = (Sign, SEN , {C-z)-£.e\Sign\ ) 
and i : SEN(£) — ► ^(SEN(E')) a multifunction from SEN(E) to SEN(E') . Then i is a (local) semi- 
interpretation o/ (£,<£) in (£',<!>') if for all <j) £ SEN(E), 

0€C E (*) =>i(0)CC E /(*') (7) 

ft jj t? (local) interpretation of(T,,*S?) in (l!,&) 

GC^D) o CCjy^) (8) 

Finally, we say that i (locally) interprets (!,<&}, if there is a specification (lP,<t>°) on which (E,<&) is 
interpreted by i. 

Adopting expression "0 is true in specification (£,<!>)" to abbreviate the fact that £ Ce(<&), defini- 
tion © can be read as (j> is true in (E,<I>) iffi(<p) is true in (E', <£>'}. 

Definition 7 Lef &P = (E,<I>) fte a specification and i : SEN(E) — >• ^ 2> (SEN(£ / )) a translation which 
interprets SP. A specification SP' = (L',<t>'} refines SP via local interpretation i, written as SP^i SP', if 
for all <j) £ SEN(E), 

^GC E ($)^^)CC ff ($') (9) 

Given a a : E — > E' £ Sign, SEN(a) : SEN(E) — > SEN(E') induces a translation that maps each 
£ SEN(E) into {SEN(a)(0)}. In the sequel we identify this translation simply with SEN(a). 

Definition 8 A signature morphism a : E — > £' £ S/gTi is conservative if for any <I> C SEN(E), SEN(a) 
interprets (£,<&) in S/* 7 = (E',SEN(ct)(4>)). 

Observe that SEN(a) is always a semi-interpretation from SP to 5P CT . Moreover, note that conservative- 
ness is a stronger notion than that of interpretability. 
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Theorem 1 Let o : £ — >■ Tf G Sign be a conservative signature morphism, SP = a specification 

over I and <!>' G SEN(I'). Then, 

SEN(a)(<£) C C E .(0>') implies that SP^ SEN{a) (£',<&'> (10) 

In practice, new specifications are built from old through application of a number of specification 
constructors. As a minimum set we consider operators to join two specifications, to translate one into 
another, and to derive one from another going backward along a signature morphism. The following 
definition characterizes along these lines a notion of structured specification in an arbitrary 7r-institution. 

Definition 9 Structured specifications over an arbitrary %-institution I = (Sign, SEN, (Ci)^sign\) are 
defined inductively as follows, taking flat specifications as the base case. 

• For a signature E, the union of specifications SP\ = (E,3>i) and SP2 = (£,$2) * J defined as 

union (SP 1 ,SP 2 ) = U$ 2 ) 

• The translation of specification SP = (£,<!>) through a morphism a : £ — ^ £' in Sign is defined as 

translate SP through o = (If, SEN (a) (<£)) 

• r/jg derivation of al specification from SP' = (£',<&') through a morphism a : E — >• £' m Sign « 
defined as 

derive SP' through a = 

w/jere »F = {y| SEN(ff)(vf) G Qy^)}. 

Of course, it is desirable that refinement be preserved by horizontal composition of specifications. In 
particular, refinement by interpretation should be preserved by all specification constructors in Definition 
[9j The result is non trivial. For union we have, 

Lemma 3 Let i : SEN(I) — ► ^(SEN(E')) be a local interpretation, and SP\ = (£,$1), SP 2 = (E,<J> 2 ) 
specifications such thatSP\ ~>,-5P{ andSPz^iSP^. Ifi interprets union(5Pi,5'/ 3 2)> then un ion (SP^SPj) 
union (SP[,SP^). 

Proof. For all G SEN(£), we reason 

SP l ~~> i SP[ A SP 2 ^iSP2 
<^ { definition} 

G C L (*i)=>i(0) CC F ($l) A ^d^^jCCi?^) 
=4> { Cj: , Cjy monotonic } 

G (C E (*i)UC L (*2)) C (Q^'JUQy^)) 

<^ { definition} 

union (5Pi,5P 2 ) un ion (SP{,Si£) 

□ 

The remaining cases are not straightforward. Actually, achieving compatibility entails the need for 
imposing some non trivial conditions on morphisms. 
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5 Towards a refinement calculus 

Having defined refinement by interpretation across ^-institutions and inside an arbitrary 7T-institution, 
this section sketches their interconnections. Our first step is to define how a specification in an institution 
/ translates to I' along an interpretation. 

Definition 10 Let p = (F, a) : / — > /' be a translation between ^-institutions I and I' and SP = 

a specification in I. The translation p(SP) ofSP through p is defined by 

= <F(£),0fc(*)) (11) 

Next lemma answers the following question: is refinement by interpretation over arbitrary 7T-institutions 
preserved by the specification constructors? 

Lemma 4 The definition of specification translation is structural over the specification constructors 
given in definition® i.e. 

p {un\ox\(SP u SP 2 )) = union(p(SPi),p(5P 2 )) 
p (translate SP through a) = translate p(SP) through F(a) 
p (derive SP' through a) = derive p(SP') through F(a) 



Proof. For the first case let SPi = and SP 2 = (r 2 ,<£ 2 ). Then > 

p (union(SPi, SP 2 )) 
= { definition of union} 

p U<D 2 ) 
= { definition of p } 

(F(r),a(*iU*a)) 
= { a is a natural transformation} 

(F(E),a(*i)ua(*2)) 
= { definition of union} 

union((F(E),a(3) 1 )),(F(E),a(^ 2 ))) 
= { definition of p } 

un ion (p(SPi),p(SP 2 )) 
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Consider now the second case (the third being similar): 

p (translate SP through <j) 
= { definition of translate} 

= { definition of p } 

<F(E0,Oto(cT(*))) 
= { a is a natural transformation} 

(F(E'),^((r)(aE(*))) 
= { definition of translate} 

translate (F(L')>Ofc(*)) through F(a) 
= { definition of p } 

translate p(5P) through F(a) 

Note a slight abuse of notation: the extension of p (SP) in the conclusion is actually through the powerset 
extension of F(<r). 

□ 



6 Conclusions and related work 

In software development, one often has to resort to a number of different logical systems to capture 
conttasting aspects of systems' requirements and programming paradigms. This paper uses 7i-institutions 
to formalize arbitrary logical systems and lifts to such level a recently proposed [MMB09b 1 MMB09a] 
approach to refinement based on logical interpretation. 

Refinement by interpretation is formulated at both a global (i.e., across ^-institutions) and local 
(i.e., between specifications inside an arbitrary ^-institution) level. The paper introduces a notion of 
structured specification and shows that, at both levels, refinement by interpretation respects the proposed 
specification constructors. Actually, the institutional setting not only makes it possible to go a step further 
from [MMB09a] in generalizing the concept to arbitrary logics, but also provides a basis to build up a 
refinement calculus of "institution-independent", structured specifications. 

We close the paper with a few remarks on refinement by interpretation in itself and some pointers to 
related work. 

The idea of relaxing what counts as a valid refinement of an algebraic specification, by replacing 
signature morphisms by logic interpretations is, to the best of our knowledge, new. The piece of re- 
search initiated with |MMB09b| up to the present paper was directly inspired by the second and third 
author's work on algebraic logic as reported, respectively, in [Mar06] and [Mad08], where the notion 
of an interpretation plays a fundamental role (see, e.g., I BP89 . IBPO 1 1 IBR031 ICze Ol l ) and occurs in dif- 
ferent variants. In particular, the notion of conservative translation intensively studied by Feitosa and 
Ottaviano [FD01 ] is the closest to our own approach. 

Refinement by interpretation should also be related to the extensive work of Maibaum, Sadler and 
Veloso in the 70's and the 80's, as documented, for example, in [MSV84, MVS85]. The authors resort 
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to interpretations between theories and conservative extensions to define a syntactic notion of refinement 
according to which a specification SP' refines a specification SP if there is an interpretation of SP' into 
a conservative extension of SP. It is shown that these refinements can be vertically composed, therefore 
entailing stepwise development. This notion is, however, somehow restrictive since it requires all maps 
to be conservative, whereas in program development it is usually enough to guarantee that requirements 
are preserved by the underlying translation. Moreover, in that approach the interpretation edge of a 
refinement diagram needs to satisfy a number of extra properties. 

Related work also appears in [FM93, Vou05] where interpretations between theories are studied, as 
in the present paper, in the abstract framework of TT-institutions. The first reference is a generalization of 
the work of Maibaum and his collaborators, whereas the second generalizes to ^-institutions the abstract 
algebraic logic treatment of algebraic semantics on sentential logics. Notions of interpretation between 
institutions also appear in [Bor02l and HTar951 under the designation of institution representation. Dif- 
ferently from the one used in this paper, borrowed from [Vou03], they are not defined as multif unctions. 
The work of Jose Meseguer [Mes89 ] on general logics, where a theory of interpretations between logical 
systems is developed, should also be mentioned. 

We believe this approach to refinement through logical interpretation has a real application potential, 
namely to deal with specifications spanning through different specification logics. Particularly deserving 
to be considered, but still requiring further investigation, are observational logic [BHK03], hidden logic 
|Ro§00 ( MP07] and behavioral logic [Hen97]. As remarked above, the study of refinement preservation 
by horizontal composition remains a challenge and a topic of current research. 

Other research topics arise concerns the ways in which global and local levels interrelate. For ex- 
ample, we are still studying to what extent a local refinement by interpretation of a specification in a 
7r-institution /, lifts to another local refinement of its translation induced by a global interpretation from 
/ to another ^-institution /'. 
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